https://steam.web-server.top/

Impersonating Steam

Intent: Credential collection

• Domain is not operated by Steam
• TLS certificate has no organization information
• Mail servers do not match Steam's known infrastructure
• SPF record does not reference Steam's infrastructure

Steam verification code login page asking for Steam account credentials